postfix-users December 2011 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Postfix "lost connection after DATA from unk

Postfix "lost connection after DATA from unknown..." and ipfilter "-AF OUT" log message

From: Jim Seymour <jseymour_at_nospam>
Date: Sun Dec 11 2011 - 23:10:34 GMT
To: postfix-users@postfix.org

Hi All,

This may be a weird one, and may be completely OT. If the latter:
Feel free to tell me to bugger off :)

System is FreeBSD 8.2, running ipfilter and
postfix-current-2.9.20111119,4.

Occasionally I see something like this from ipfilter in
/var/log/messages:

    bge1 @0:24 b <my_outside_ip>,25 -> 89.73.201.168,36545 PR tcp len
        20 40 -AR OUT

Looking in /var/log/maillog...

    Dec 11 17:47:08 myhost postfix/smtpd[48290]: connect from
      unknown[89.73.201.168]
    Dec 11 17:47:10 myhost postfix/smtpd[48290]: NOQUEUE: reject:
      RCPT from unknown[89.73.201.168]: 450 4.7.1 Client host
    rejected: cannot find your reverse hostname, [89.73.201.168];
      from=<anon@carloerbareactifs.com> to=<nnguyen@mydom.ain>
      proto=ESMTP helo=<89-73-201-168.dynamic.chello.pl>
    Dec 11 17:47:11 myhost postfix/smtpd[48290]: lost connection
      after DATA from unknown[89.73.201.168]
    Dec 11 17:47:11 myhost postfix/smtpd[48290]: disconnect from
      unknown[89.73.201.168]

This particular one occurred seven times in a row, in quick
succession.

I've searched on this *fairly* seriously and come up with nothing.
Anybody got any idea what this is?

Thanks,
Jim
-- Note: My mail server employs *very* aggressive anti-spam filtering. If you reply to this email and your email is rejected, please accept my apologies and let me know via my web form at <http://jimsun.LinxNet.com/contact/scform.php>.